Uses of Class
org.forgerock.secrets.GenericSecret
Package
Description
Core
Filter
implementations.Core
Handler
implementations.This package provides APIs for OAuth 2.0 services implementations.
Collection of heaplets supporting OAuth2 client authentication Filters.
Contains proxy related heaplets.
Provides the Common Secrets API for accessing secrets of various kinds.
Access Management Server.
AM authentication service.
Miscellaneous utility classes.
Provides a unified API for accessing secrets of various kinds.
Implementations of
SecretStore
for accessing keys stored in Java KeyStores, such as
PKCS#11 Hardware Security Modules (HSMs) and PKCS#12 file-based encrypted key stores.A Secrets API backend that can obtain OAuth 2 access tokens from a token endpoint, along with a collection of
grant type handlers.
Provides a
SecretStore
implementation that loads secrets from a Common Configuration
PropertyResolver
and then decodes it with a
SecretPropertyFormat
.-
Uses of GenericSecret in org.forgerock.http.filter
Modifier and TypeMethodDescriptionstatic Filter
Filters.newBearerTokenAuthFilter
(SecretReference<GenericSecret> tokenReference) Creates an authenticationFilter
that puts a Bearer Authorization header in the request.static Filter
Filters.newBearerTokenAuthFilterWithoutRetry
(SecretReference<GenericSecret> tokenReference) Creates an authenticationFilter
that puts a Bearer Authorization header in the request.static Filter
Filters.newHttpBasicAuthenticationFilter
(String username, SecretReference<GenericSecret> password) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newHttpBasicAuthenticationFilter
(String username, SecretReference<GenericSecret> password, Charset charset) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newHttpBasicAuthenticationFilter
(CredentialPair<GenericSecret> credentialPair) Creates an authenticationFilter
that puts a Basic Authorization header in the request.static Filter
Filters.newHttpBasicAuthenticationFilter
(CredentialPair<GenericSecret> credentialPair, Charset charset) Creates an authenticationFilter
that puts a Basic Authorization header in the request.static Filter
Filters.newUrlEncodedHttpBasicAuthFilter
(String username, SecretReference<GenericSecret> password) Deprecated, for removal: This API element is subject to removal in a future version.static Filter
Filters.newUrlEncodedHttpBasicAuthFilter
(CredentialPair<GenericSecret> credentialPair) Creates an authenticationFilter
that put a Basic Authorization header in the request. -
Uses of GenericSecret in org.forgerock.http.handler
Modifier and TypeMethodDescriptionHttpClientHandler.ProxyInfo.getCredentials()
Returns theSupplier
containing the username and password to use when authenticating to the proxy.Modifier and TypeMethodDescriptionHttpClientHandler.ProxyInfo.asyncProxyInfo
(URI proxyUri, CredentialPair<GenericSecret> credentialPair, Clock clock, Duration refreshDuration) Creates an instance of ProxyInfo for a proxy that requires authentication, this will update its secrets in the background and will not block threads.static HttpClientHandler.ProxyInfo
HttpClientHandler.ProxyInfo.blockingProxyInfo
(URI proxyUri, CredentialPair<GenericSecret> credentialPair) Creates an instance of ProxyInfo for a proxy that requires authentication, this will block and wait for a credentialPair to return a value.static HttpClientHandler.ProxyInfo
HttpClientHandler.ProxyInfo.proxyInfo
(URI proxyUri, Supplier<PrincipalAndSecret<GenericSecret>> supplier) Creates an instance of ProxyInfo for a proxy that does not require authentication. -
Uses of GenericSecret in org.forgerock.http.oauth2
ModifierConstructorDescriptionClientSecretBasicAuthenticationFilter
(String clientId, SecretReference<GenericSecret> secretReference) Deprecated.Creates and instance of ClientSecretBasicAuthenticationFilter.ClientSecretPostAuthenticationFilter
(String clientId, SecretReference<GenericSecret> secretReference) Deprecated, for removal: This API element is subject to removal in a future version.UseClientSecretPostAuthenticationFilter(CredentialPair)
instead.ClientSecretPostAuthenticationFilter
(CredentialPair<GenericSecret> credentials) Creates a filter that will add the client credentials to the request body. -
Uses of GenericSecret in org.forgerock.openig.filter.oauth2.client.authentication
Modifier and TypeMethodDescriptionprotected Filter
ClientSecretBasicAuthenticationFilterHeaplet.createFilter
(CredentialPair<GenericSecret> credentialPair) protected Filter
ClientSecretPostAuthenticationFilterHeaplet.createFilter
(CredentialPair<GenericSecret> credentialPair) -
Uses of GenericSecret in org.forgerock.openig.proxy
ModifierConstructorDescriptionCustomProxyOptions
(URI uri, String username, SecretReference<GenericSecret> passwordReference) Creates a newCustomProxyOptions
with login/password. -
Uses of GenericSecret in org.forgerock.openig.secrets
Modifier and TypeMethodDescription<S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<Stream<S>,NeverThrowsException> Modifier and TypeMethodDescriptionHsmSecretStoreHeaplet.keyStore
(SecretsProvider secretsProvider, Purpose<GenericSecret> storePasswordPurpose, Options options) KeyStoreSecretStoreHeaplet.keyStore
(SecretsProvider secretsProvider, Purpose<GenericSecret> storePasswordPurpose, Options options) -
Uses of GenericSecret in org.forgerock.openig.tools.am
Modifier and TypeMethodDescriptionstatic AmService.Discovery
AmService.discovery
(URI baseUri, Realm realm, String cookieName, Version versionHint, String agentId, SecretReference<GenericSecret> agentPassword, Handler amHandler) Create an AM Discovery object which will get information from AM upon building. -
Uses of GenericSecret in org.forgerock.openig.tools.authentication
Modifier and TypeMethodDescriptionAuthenticationService.authenticate
(Context context, String username, SecretReference<GenericSecret> passwordRef) Authenticates a subject (identified with the givenusername
andpasswordRef
credentials), returning asynchronously an SSO token (if the authentication succeeded) or anAuthenticationException
on failures (I/O, invalid credentials, ...).AuthenticatorAuthenticationService.authenticate
(Context context, String username, SecretReference<GenericSecret> passwordRef) -
Uses of GenericSecret in org.forgerock.openig.util
Modifier and TypeMethodDescriptionJsonValues.constantSecretReference()
Returns aSecretReference.constant(Secret)
from aGenericSecret
attribute value. -
Uses of GenericSecret in org.forgerock.secrets
Modifier and TypeFieldDescriptionstatic final Purpose<GenericSecret>
Purpose.PASSWORD
Indicates a secret intended to be used as a password for authentication to some service.Modifier and TypeMethodDescriptionstatic GenericSecret
GenericSecret.password
(char[] password) A helper utility for constructing a Generic Secret from a password that never expires.static GenericSecret
A helper utility for constructing a Generic Secret from a password that never expires.static GenericSecret
A helper utility for constructing a Generic Secret from a password with a default expiry time. -
Uses of GenericSecret in org.forgerock.secrets.keystore
ModifierConstructorDescriptionKeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword) Initialises the keystore using the same password for the keystore and all keys and default configuration options.KeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword, SecretReference<GenericSecret> keyEntryPassword, Options options, KeyStoreSecretStore.StableIdProvider stableIdProvider) Initialises the key store.KeyStoreSecretStore
(Function<char[], KeyStore, KeyStoreException> keyStoreLoader, SecretReference<GenericSecret> keyStorePassword, Options options) Initialises the keystore using the same password for the keystore and all keys. -
Uses of GenericSecret in org.forgerock.secrets.oauth2
Modifier and TypeMethodDescription<S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<S,NoSuchSecretException> <S extends GenericSecret>
Promise<Stream<S>,NeverThrowsException> Modifier and TypeMethodDescriptionAccessTokenSecretStore.Builder.forPurpose
(Purpose<GenericSecret> purpose) Configures the purpose for which this access token store is to be used.AccessTokenSecretStore.Builder.withClientSecretBasicAuth
(String clientId, SecretReference<GenericSecret> clientSecretRef) Deprecated, for removal: This API element is subject to removal in a future version.AccessTokenSecretStore.Builder.withClientSecretBasicAuth
(CredentialPair<GenericSecret> credentials) Configures the token store to supply client credentials via HTTP Basic Authentication.AccessTokenSecretStore.Builder.withClientSecretPostAuth
(String clientId, SecretReference<GenericSecret> clientSecretRef) Deprecated, for removal: This API element is subject to removal in a future version.AccessTokenSecretStore.Builder.withClientSecretPostAuth
(CredentialPair<GenericSecret> credentials) Configures the token store to supply client credentials via client_secret_post method.ModifierConstructorDescriptionJwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference) Constructs the handler with the given source of JWTs.JwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference, String clientId, Collection<String> scope) Constructs the handler with the given source of JWTs, for the given client and scope.JwtBearerGrantTypeHandler
(SecretReference<GenericSecret> jwtReference, Collection<String> scope) Constructs the handler with the given source of JWTs, for the given scope.ResourceOwnerPasswordGrantTypeHandler
(String clientId, String username, SecretReference<GenericSecret> password) Deprecated, for removal: This API element is subject to removal in a future version.ResourceOwnerPasswordGrantTypeHandler
(String clientId, String username, SecretReference<GenericSecret> password, Collection<String> scope) Deprecated, for removal: This API element is subject to removal in a future version.ResourceOwnerPasswordGrantTypeHandler
(String clientId, CredentialPair<GenericSecret> ownerCredentials) Initialises the grant type handler with the given credentials and the default scope for this client.ResourceOwnerPasswordGrantTypeHandler
(String clientId, CredentialPair<GenericSecret> ownerCredentials, Collection<String> scope) Initialises the grant type handler with the given resource owner credentials. -
Uses of GenericSecret in org.forgerock.secrets.propertyresolver
ModifierConstructorDescriptionPemPropertyFormat
(SecretsProvider secretsProvider, Purpose<GenericSecret> decryptionPasswordPurpose) Initializes the property format with the given secrets provider and purpose for decrypting password-encrypted PEM files.PemPropertyFormat
(SecretsProvider secretsProvider, Purpose<GenericSecret> decryptionPasswordPurpose, Supplier<SecretBuilder> secretBuilderSupplier) Initializes the property format with the given secrets provider and purpose for decrypting password-encrypted PEM files.
Filters.newHttpBasicAuthenticationFilter(CredentialPair)
instead